PlatformPlatform overviewDocument checksSupplier filesVeraCatoPassports and SealsClearGateCustodyIntakeAPIPricing
SolutionsCompounding pharmacies503B outsourcing facilitiesClinicsMed spasTelehealth platformsConsultantsSolutions overview
ResourcesMethodologyOrder-level COA traceabilitySupplier packet diligenceResource libraryPublic toolsIntelligenceTrust Center
CompanyAbout VerituraWhy independentPartnersFor counselContact
Log inBook a demo

COA traceability: A COA is not traceability. Twelve fields tie it to the order.

Every released order. Every gap named.

The twelve fields that tie a certificate to its order.

Traceability starts when the certificate is tied to the exact order, lot, buyer, reviewer, supplier packet, decision and customer proof. This standard sets the twelve fields that tie them, and shows how Veritura fills each one as the work happens, not as a folder of PDFs assembled after a recall.

Standard VTR-TRACE-20260526, published May 26, 2026. Applies to every released order. Twelve fields, gaps named.

A folder answers after the scramble. A record answers before it.

Which customers received this lot, who reviewed the evidence, and what supported the release. A folder helps once you know what to search for; an order-level record answers before the scramble.

The questionA folder of certificatesAn order-level record
Which orders received lot BM-5520?Invoices searched by hand.One search: every batch, order, Passport and clinic that rests on the lot.
Who reviewed the evidence?An initial on a log, if anyone kept one.A named person, the time, the meaning of their signature and what they relied on.
What was the certificate checked against?Not recorded.Up to 20 named checks, each naming its standard, each finding cited to its page and line.
What can the customer be shown?The PDF, or nothing.A Passport built from an allowlist, with internal notes held back.
What happens on a recall?Phone calls from a spreadsheet.Declared once. Every desk on Veritura holding the lot, and every patient who saved a unit or asked for recall notices, is emailed; every other order returns to the pharmacy as an order list.

Missing fields do not fail a record automatically. They become explicit gaps, named before anyone relies on the record or a customer sees it.

Twelve fields per released order. Each filled as the work happens.

The minimum operating record for one released order. Each field says what it holds and where Veritura fills it from as the work happens.

FieldWhat it holdsHow Veritura fills it
Order IDThe order, invoice or fulfilment reference.Carried on the Passport, one Passport per dispensed order. A reference that looks like patient text is refused.
BuyerThe clinic, pharmacy, platform or account the order went to.The shipment's recipient in Custody. Never a patient's name.
ProductThe preparation or substance the order supplied.The lot's product and, for a preparation, each ingredient, up to 12.
LotThe batch or supplier lot used for recall and dispute lookup.Bound to the order at release, with every ingredient lot bound to the preparation.
COAThe certificate and report ID behind the lot.Kept as received with its SHA-256 fingerprint; every value cited to its page and line.
Supplier packetThe supplier file behind the lot.Six dated elements, each current, due or overdue, with an owner and a due date on every gap.
ReviewerThe person who reviewed the evidence before release.A named person's review, required on the server before anything leaves the lot.
Decision stateWhere the record stands.One of four verdicts on the evidence, one of four dispositions at receiving, and Allow, Review or Hold under the pharmacy's policy.
Evidence rowsWhat was present, missing, conflicting or could not be verified.Each check met, not met or not checked, with what failed, why, and how it clears.
Customer boundaryWhat can be shared without leaking internal notes or overclaiming.The Passport's allowlist: 13 certificate fields, the chain by role, and no score.
Audit trailWhen the record changed, who changed it and why.Every action on a ledger with who, when and why; signatures chained per workspace; nothing deleted.
Release guardOne production release per order.One Passport per dispensed order, charged once when selected; scans and reprints add nothing.
One number on the slip and the Passport, for order ORD-60412: the order reference from the pharmacy's own system; batch CB-2026-1007-01 and its lots BM-5520 and NC-3318; came in by watched folder on 07 OCT; the Passport released; the packing slip, 12 of 12 Seals matched; a reference like a birth date, 1 refusal, never stored; and the order system unchanged, the source of truth
The fields one released order carries, each matched as it happens, and the one kind of reference that is refused.

Nine links, maker to patient. Each closed, open or your call.

Nine links. Each is closed, open or the pharmacy's call, and each says what closes it.

  1. Manufacturer

    Named on the certificate and searched in FDA's establishment registry. A firm registered only to relabel or repack does not pass as the maker.

  2. Supplier

    The firm that sold the lot, with its supplier file and every gap's owner.

  3. Certificate

    Read line by line against up to 20 named checks: the statute, FDA's records, the certificate's own numbers and the limits computed for the dose.

  4. Received

    Nine receiving gates and one of four dispositions: release to inventory, quarantine pending evidence, request a supplier correction, or hold for a person.

  5. Lot decision

    A named person's review, signed with a fixed meaning and bound to the record as it stood.

  6. Preparation

    The compounding record and each ingredient lot, with the beyond-use date checked against USP <795> or <797> and every ingredient's own expiry.

  7. Passport

    One per dispensed order, issued only from a reviewed lot.

  8. Shipment

    One code per box and one Seal per unit, written to the custody record.

  9. Patient

    The record opened by scanning the label. No patient identity is held on it.

Every purchased lot, step by step: 12 lots, 9 steps each, maker, supplier, certificate, received, decision, preparation, Passport, shipment and patient, each cell on record, recorded by a person, open, stopped or not reached; sodium chloride lot NC-3318 has 6 of 9 on record and naltrexone lot NX-2291 1 of 9; beside them, how many of the 12 lots reach each step
Nine links from the maker to the patient, for every lot bought, and where each one stops.

Five steps, written as they happen. Nothing assembled after.

Five steps. Because the record is written as each one happens, nothing has to be assembled after the fact.

  1. Intake

    Documents arrive by upload, by the workspace's own email-in address, through each supplier's standing link, by lot-number fetch from a supplier's public library where one exists, or by API. Each file is identified by its bytes, not its name, and kept as received.

  2. Evidence custody

    Every value read keeps its page and line. The file keeps its SHA-256 fingerprint. Gaps and limits stay attached to the order record.

  3. Person review gate

    The named checks that apply run, what fails is held for a named person, and nothing leaves the lot until that person records what they checked and relied on.

  4. Customer Passport

    Each dispensed order gets one Passport. The customer sees the lot, the certificate lines from a fixed allowlist, the chain by role and the boundary. Internal notes and commercial fields stay in the workspace.

  5. Recall and dispute

    Search a lot and see every batch, order, Passport and clinic it touched. Lots on file are re-matched against openFDA enforcement records at check time and again on an hourly cycle; a match holds the lot and marks every Passport minted from it.

Orders in from the workspace, a watched folder or the API: each order with its preparation and batch, how it came in and its Passport, such as ORD-60416 and ORD-60408 for ketoprofen 10% topical cream batch KC-2026-1011-01, by API and by workspace, and the cyanocobalamin orders for batch CB-2026-1007-01, each attached; one order refused and not stored
Every order written as it arrives, with how it came in and the Passport it carries.

One record, two depths. Built from an allowlist.

The same record at two depths. The customer layer is built from an allowlist, so nothing internal leaks by accident.

LayerOperator workspaceCustomer Passport
EvidenceEvery check, finding and citationThe certificate lines, each beside its printed limit
DecisionThe verdict, the reviewer, the signature and the reasonThat a person reviewed the lot, and who released it
SupplierThe supplier file, its gaps and the correspondenceThe supplier and the maker, by role
CommercialBilling, usage and internal notesNever shown
LanguageFindings in the product's fixed vocabularyNo score, band or posture word, and no supplier approval language

Documentation evidence only. Veritura does not certify supplier quality, approve a product, give medical or legal advice, determine safety, replace laboratory testing, or turn a certificate into proof that a product claim is true.

Read this record as the patient, chosen, on the Passport for order ORD-60412: fourteen allowlisted fields, the release gates and the fingerprint, never a score or anyone's identity; beside it the clinic's and the inspector's depths; and below, as the patient sees it, the patient's own Passport opened on Made: its cyanocobalamin came from Halden Fine Chemicals, lot BM-5520, supplied by Brookmere API Supply, received October 3, 2026, its certificate from Brookmere Quality Laboratory with its retest date and test method
The patient's depth, their own Passport, built from an allowlist: fourteen fields, the gates and the fingerprint.

Five jobs get shorter. The answer exists before the question.

Five jobs get shorter, because the answer already exists when the question arrives.

Recall handling. Search the lot once and see the connected orders, clinics, certificates, supplier files and open gaps.

Dispute resolution. The record keeps the certificate, the supplier evidence, the reviewer and the customer proof as they stood at release.

Customer trust. Customers open a clean Passport while internal notes, pricing and supplier correspondence stay private.

Supplier history. Repeated gaps, clean packets, missing fields and reused documents become visible across a supplier's lots.

Partner workspaces. Clinics, platforms and consultants read the same record at the depth each is allowed, without owning the review.

Twelve questions, one per field. An answer or a named gap.

Twelve questions, one per field. A record meets the standard when each has an answer or a named gap.

  1. Order ID

    Can you name the order this proof belongs to?

  2. Buyer

    Can you name who received it, without naming a patient?

  3. Product

    Can you name the preparation and every ingredient in it?

  4. Lot

    Can you name the lot, and every ingredient lot behind it?

  5. COA

    Can you open the certificate as it was received, and the line each value came from?

  6. Supplier packet

    Can you show the supplier file as it stood on the release date?

  7. Reviewer

    Can you name the person who reviewed the evidence, and when?

  8. Decision state

    Can you say what the record concluded, in one heading?

  9. Evidence rows

    Can you list what was missing or could not be verified?

  10. Customer boundary

    Can you say exactly what the customer was shown?

  11. Audit trail

    Can you show every change, with who made it and why?

  12. Release guard

    Can you show one release per order, and no more?

Sample records on this site show the shape of the record; sandbox records are free for testing. A workspace runs the record on your own orders.

Run the record on your own orders.

Bring one released order. We trace it field by field, from the order number to the person who reviewed the evidence.